← Santos Website Intelligence

Terms, privacy, and data retention.

Effective July 18, 2026. This page explains the public operating rules for Santos Website Intelligence API and its Quick Intelligence, Deep Website Intelligence, and Agent Readiness services.

Acceptable use

Audit only public targets you are authorized to assess. Do not use the service to evade access controls, overload a target, probe private networks, collect credentials, or perform unlawful or abusive activity. Private, loopback, reserved, metadata, credential-bearing, and disallowed-port targets are blocked.

What the audits do

Reports are automated technical observations, not legal, compliance, accessibility-certification, financial, or security guarantees. Quick and Agent Readiness audits use bounded public requests. Deep Website Intelligence uses an isolated browser and remains a single-page laboratory assessment, not a penetration test.

Privacy and collected data

  • Target URLs and operational request metadata may be processed to run and protect the service.
  • Agent Readiness never authenticates to or pays the audited target, creates target accounts, submits forms, or invokes target business tools.
  • Cookie values, API keys, credentials, payment signatures, and target-user personal data are not intentionally collected.
  • Query strings, fragments, credentials, and sensitive headers are redacted from audit evidence where applicable.

Cookies and on-site analytics

  • santos_consent — a first-party, strictly necessary cookie that remembers your cookie choice for one year. It stores only the word "all" or "essential"; it is not an identifier and is never sent to third parties.
  • If you accept, we collect privacy-safe, first-party funnel analytics: an event name and a timestamp only — no URLs, query strings, report contents, IP-based fingerprinting, or cross-site tracking. If you decline (or do nothing), no analytics events are sent at all.
  • Admin sign-in (/admin) sets Supabase session cookies; these are strictly necessary for that authenticated area and are not used on public pages. Stripe may set its own cookies during card checkout, governed by Stripe's privacy policy.
  • You can change or withdraw your choice any time via "Cookie settings" in the footer, or by deleting the cookie in your browser.

Retention

Synchronous audit responses are generated for the requesting client and are not promised as permanent storage. Deep reports and artifacts may be retained for a limited operational period and then expire. Security, rate-limit, payment, and reliability logs may be retained as reasonably necessary to operate, troubleshoot, prevent abuse, and meet applicable obligations.

Payments and retries

Enforced prices and billing units appear in the live x402 challenge. Safe Fetch, Content Extraction, Structured Extraction, Quick Intelligence, Screenshot & PDF Render, Feed Parser, Link Map, Summarizer, and the $0.075 USDC Agent Readiness Audit settle only on a successful response. Deep Website Intelligence payment purchases one bounded compute reservation and settles when the job is accepted. Use an Idempotency-Key for Deep job retries. Never rely on a price that is not enforced by the live route.

Card purchases: human reports are a one-time charge by tier — $9 USD Quick (Agent Readiness, fetch-based evidence) or $29 USD Deep (Website Intelligence, browser-rendered) — processed by Stripe (no account is created by Santos). Prices are fixed server-side. After payment you receive a private, tokened link to your report by email. Refunds for card purchases are handled manually — email info@santosautomation.com with your purchase email and we will review the request.

Santos Monitoring is a $9 USD/month card subscription, processed by Stripe, that re-audits one URL weekly with the same engine. It renews monthly until canceled; you can cancel anytime via the manage link included in every monitoring email, and cancellation stops future charges and weekly re-audits immediately. Score-change alerts and the monthly digest are informational notifications, not an SLA or a guarantee of detection or delivery timing.

Availability and support

Services are provided as available and may change through versioned contracts. Report problems, replacement-run requests caused by Santos infrastructure, or privacy questions to info@santosautomation.com. These plain-language terms should be reviewed by qualified counsel as the service grows.